Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Many records in the additional section cause CPU exhaustion
Vulnerability Description
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
不对称的资源消耗(放大攻击)
Vulnerability Title
ISC BIND 安全漏洞
Vulnerability Description
ISC BIND是ISC开源的一套实现了DNS协议的开源软件。 ISC BIND 9存在安全漏洞，该漏洞源于可以构建一个区域，使得对它的某些查询将生成包含大量附加部分记录的响应。受此问题影响的named实例可能会被迫消耗过多的 CPU 资源，直至资源耗尽，导致服务器无法响应其他客户端查询。
CVSS Information
N/A
Vulnerability Type
N/A